Make kub[cw] a special nftables case

2024-05-31 12:57:38 +02:00 · 2024-05-31 12:57:38 +02:00 · d1a85199c6
parent e87657f209
commit d1a85199c6
1 changed files with 8 additions and 0 deletions
--- a/global/overlay/etc/puppet/manifests/cosmos-site.pp
+++ b/global/overlay/etc/puppet/manifests/cosmos-site.pp
@ -54,3 +54,11 @@ if is_hash($ssh_authorized_keys) {
 #      proto => "tcp"
 #   }
 #}
+
+if $::facts['hostname'] =~ /^k8s[wc]/ {
+    warning('Setting nftables to installed but disabled')
+    ensure_resource ('class','sunet::nftables::init', { enabled => false })
+} else {
+    warning('Enabling nftables')
+    ensure_resource ('class','sunet::nftables::init', { })
+}